From 42365c18e9bf99b77f9b829d3772d200ac166598 Mon Sep 17 00:00:00 2001 From: Junwei Zhao Date: Fri, 20 Jan 2023 10:40:59 +1100 Subject: [PATCH] Update files --- argocd-values.yaml | 1 + media/media.yaml | 18 +++++++++--------- 2 files changed, 10 insertions(+), 9 deletions(-) diff --git a/argocd-values.yaml b/argocd-values.yaml index 8396df5..e112a71 100644 --- a/argocd-values.yaml +++ b/argocd-values.yaml @@ -28,6 +28,7 @@ server: kubernetes.io/tls-acme: "true" cert-manager.io/cluster-issuer: "letsencrypt-prod" nginx.ingress.kubernetes.io/proxy-body-size: 102400m + nginx.ingress.kubernetes.io/whitelist-source-range: "192.168.1.0/24" nginx.ingress.kubernetes.io/auth-url: "https://id.junv.me/oauth2/auth" nginx.ingress.kubernetes.io/auth-signin: "https://id.junv.me/oauth2/start?rd=https%3A%2F%2F$host$request_uri" hosts: ["argocd.junv.me"] diff --git a/media/media.yaml b/media/media.yaml index d3b2141..83337c2 100644 --- a/media/media.yaml +++ b/media/media.yaml @@ -588,18 +588,18 @@ spec: - name: aria2-cache persistentVolumeClaim: claimName: aria2-cache + securityContext: + # runAsUser: 0 + # privileged: true + capabilities: + add: + - NET_ADMIN + - CHOWN + - NET_RAW + - SETPCAP containers: - name: openvpn image: qmcgaw/gluetun:latest - securityContext: - runAsUser: 0 - privileged: true - capabilities: - add: - - NET_ADMIN - - CHOWN - - NET_RAW - - SETPCAP imagePullPolicy: IfNotPresent resources: requests: